[Buildroot] [PATCH 1/1] package/exim: ignore CVE-2022-30333

[Buildroot] [PATCH 1/1] package/exim: ignore CVE-2022-30333

[Bernd Kuhls]

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
---
 package/exim/exim.mk | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/package/exim/exim.mk b/package/exim/exim.mk
index e0fcd83fb0..a54a39c815 100644
--- a/package/exim/exim.mk
+++ b/package/exim/exim.mk
@@ -10,6 +10,8 @@ EXIM_SITE = https://ftp.exim.org/pub/exim/exim4
 EXIM_LICENSE = GPL-2.0+
 EXIM_LICENSE_FILES = LICENCE
 EXIM_CPE_ID_VENDOR = exim
+# fixed in version 4.94.2
+EXIM_IGNORE_CVES += CVE-2022-30333
 EXIM_SELINUX_MODULES = exim mta
 EXIM_DEPENDENCIES = host-berkeleydb host-pcre2 pcre2 berkeleydb host-pkgconf
 
-- 
2.30.2

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 1/1] package/exim: ignore CVE-2022-30333

[Luca Ceresoli via buildroot]

Hi Bernd,

On Sun, 31 Jul 2022 13:27:46 +0200
Bernd Kuhls <bernd.kuhls@t-online.de> wrote:

> Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
> ---
>  package/exim/exim.mk | 2 ++
>  1 file changed, 2 insertions(+)
> 
> diff --git a/package/exim/exim.mk b/package/exim/exim.mk
> index e0fcd83fb0..a54a39c815 100644
> --- a/package/exim/exim.mk
> +++ b/package/exim/exim.mk
> @@ -10,6 +10,8 @@ EXIM_SITE = https://ftp.exim.org/pub/exim/exim4
>  EXIM_LICENSE = GPL-2.0+
>  EXIM_LICENSE_FILES = LICENCE
>  EXIM_CPE_ID_VENDOR = exim
> +# fixed in version 4.94.2
> +EXIM_IGNORE_CVES += CVE-2022-30333

This CVE does not seem related to exim but rather to rarlab. Can you
either clarify what's going on or send a patch against rarlab?

Thank you!
-- 
Luca Ceresoli, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot